NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
Section 2: Overview of enterprise telework and remote access security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security 2.2: Choose remote access methods with their security implications in view

What does 2.2 require?

When planning a remote access solution the organisation weighs the security implications of each category of method (tunnelling such as VPNs, application portals including virtual desktop and virtual mobile infrastructure, remote desktop, and direct access to applications) against operational needs. Where a third-party intermediate service is involved, its security is evaluated and shown to support the organisation's policy; servers exposed directly to the Internet are already well secured; and data at rest on the client is protected by other means because a tunnel does not protect it.

Maintained by Gerard Blokdyk

Other controls in Section 2: Overview of enterprise telework and remote access security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security controls